SAP Successfactors Implementation and Maintenance in Projects in 2024

[MansiRai]

Introduction:

I am new to SAP SuccessFactors and continuously honing my skills and knowledge through daily learning endeavors. In this blog post we will talk about the recent updates in SAP SuccessFactors Platform and Security enhancements and how to manage the SF landscape in 2024 from platform perspective

Important Information:

For New SuccessFactors Customers:

New SuccessFactors tenants created after December 9th 2022, IAS is automatically deployed. For new customers SAP is not providing the option to implement it without IAS|IPS.

For more details, please refer SAP note : 3097769 - IAS / IPS - Is IAS implementation mandatory for all SuccessFactors customers?

For Old SuccessFactors Customers:

Upon expiration of SuccessFactors SSO signing certificate on June 2, 2025, if customers do not migrate to IAS or make any changes, the User authentication and Single Sign-On functionalities will not work. Recommendation is to take action before June 2025 to make sure your SSO functionality works fine.

For more details, please refer SAP note: 2791410 - Integrating SuccessFactors with Identity Authentication IAS through the Upgrade Center

 

Steps to manage landscape:

For Greenfield implementation projects:

Below steps are already performed by SAP

• IAS is integrated with SuccessFactors Application.
• IPS configuration to sync users from SF to IAS is also partially completed. Source System as SF and Target System as IAS is created automatically.
• IPS configuration to sync users from SF to People Analytics is also partially completed. Target System as People analytics is also completed.

Below steps are required to be done by customer

• Enable sync job in IPS to sync users from SAP SF to IAS. Update transformation code if required.
• Enable sync job in IPS to sync users from SAP SF to People analytics.

Let's see how it's done.

Open IPS tenant and in Properties - Edit the filter to sync one user.

Property name:  sf.user.filter

Value: status eq 'active' and username in 'sf_username1_placeholder','sf_username2_placeholder'

Put the username of users whom you want to sync as part of your testing and trigger the sync job.Once Testing is completed, update the values as shown in the screenshot.

To test the connectivity, first trigger the simulate job (to check connectivity) and then run the Read or FullSync job to actually sync the users.

Post testing, Schedule the read job to be triggered in specific time intervals.

As this source system is configured in both the target systems ( IAS and People Analytics), It will start syncing the users to both the target environments.

Enhanced Security and Maintenance of Certificates:

Connectivity between SAP SF - IPS - IAS is done through certificates

In IPS - Authentication Property is set as ClientCertificateAuthentication

This certificate is generated in IPS and is required to be uploaded in Source system - SAP SuccesFactors and in Target System - IAS. This certificate is renewed every year and this activity is required to be performed once a year.

For Source System:

Certificate can be downloaded from here:

Certificate can be uploaded in SAP SuccesFactors in Security Center:

For Target System:

Certificate can be downloaded from here:

Upload the certificate in IAS:

 

Conclusion:

In this blog post we have learned how to manage the SuccessFactors landscape for Greenfield projects in 2024.